Commit Graph
2029 Commits
Author SHA1 Message Date
Nikos Mavrogiannopoulos e9cb3b1d60 simplify application of radius config 2015-05-19 15:39:24 +02:00
Nikos Mavrogiannopoulos 0abc1ee2db Allow overriding session-timeout from radius 2015-05-19 15:35:46 +02:00
Nikos Mavrogiannopoulos 6ff0a8fb07 Introduced session-timeout option
That allows to set the maximum number of seconds a session can be
active.
2015-05-19 15:07:51 +02:00
Nikos Mavrogiannopoulos 4dd558b0cc updated radius documentation 2015-05-19 13:57:44 +02:00
Nikos Mavrogiannopoulos a4cb90b8eb cleanup in match_password_in_reply() 2015-05-19 13:29:43 +02:00
Nikos Mavrogiannopoulos 9797ccee81 when multiple password prompts are sent, utilize a counter to differentiate them 2015-05-19 13:10:26 +02:00
Nikos Mavrogiannopoulos 2f266e5828 removed deprecated field from auth_reply_msg 2015-05-19 11:33:32 +02:00
Nikos Mavrogiannopoulos 93c0819403 doc update 2015-05-19 10:38:02 +02:00
Nikos Mavrogiannopoulos 6cb44ec8c4 tests: enhanced PAM test with a second (OTP) password 2015-05-19 10:36:45 +02:00
Nikos Mavrogiannopoulos 379716efcd pam: allow passing brief prompt in addition to messages 2015-05-19 10:09:42 +02:00
Nikos Mavrogiannopoulos 8a0dbb7435 increased timeout in main-secmod communication 2015-05-15 12:56:31 +02:00
Nikos Mavrogiannopoulos 2ed95206e2 simplified request handling in sec-mod 2015-05-14 10:22:37 +02:00
Nikos Mavrogiannopoulos 18ad0920ed close the sec-mod fds on worker 2015-05-14 09:39:13 +02:00
Nikos Mavrogiannopoulos 9966fd578c doc update 2015-05-14 09:35:14 +02:00
Nikos Mavrogiannopoulos 7086212fad remove_proc: use flags instead of multiple variables 2015-05-13 18:10:37 +02:00
Nikos Mavrogiannopoulos aeaf08491b bumped version 2015-05-13 14:32:03 +02:00
Nikos Mavrogiannopoulos 8b6b83a6f6 when the server exits don't wait for stats from sec-mod 2015-05-13 14:27:27 +02:00
Nikos Mavrogiannopoulos 8829441e82 updated main_mod_fd_sync doc 2015-05-13 14:14:33 +02:00
Nikos Mavrogiannopoulos f942dc834a doc update 2015-05-13 14:12:17 +02:00
Nikos Mavrogiannopoulos 33bcfb178e main: use two sockets to communicate with sec-mod
That allows to have a reliable synchronous socket, and
a socket where messages are sent and received asynchronously.
2015-05-13 14:04:22 +02:00
Nikos Mavrogiannopoulos accf63a9e3 Added more debugging messages 2015-05-13 13:49:16 +02:00
Nikos Mavrogiannopoulos 66203e1a6d set cloexec on sec-mod's socket file 2015-05-13 11:50:38 +02:00
Nikos Mavrogiannopoulos b5e64c1569 tests: added more users into radius' server user file 2015-05-13 09:54:22 +02:00
Nikos Mavrogiannopoulos 691d9d426a tests: updated ipv6 addresses in kerberos and pam tests 2015-05-12 11:28:41 +02:00
Nikos Mavrogiannopoulos b341880d05 export IPV6_PREFIX to scripts 2015-05-11 19:32:46 +02:00
Nikos Mavrogiannopoulos 046d1e65ea set ipv6 prefix only if it is set 2015-05-11 19:25:45 +02:00
Nikos Mavrogiannopoulos 3cc5223842 tests: updated IPv6 addresses 2015-05-11 16:14:38 +02:00
Nikos Mavrogiannopoulos 69181d0cf3 use an 127-bit prefix for IPv6 leases 2015-05-11 16:10:38 +02:00
Nikos Mavrogiannopoulos 308d0a162e tests: updated radius-test to detect disconnect in certificate auth 2015-05-11 14:27:04 +02:00
Nikos Mavrogiannopoulos df5a67b5c7 radius: set NAS_PORT on accounting requests 2015-05-11 14:26:58 +02:00
Nikos Mavrogiannopoulos 9a05edd2ec radius: corrected the byte ordering of NAS_IP_ADDRESS 2015-05-11 14:26:49 +02:00
Nikos Mavrogiannopoulos 43d174980d tests: check whether the value set in radius' NAS-IP-Address is not invalid 2015-05-11 14:26:49 +02:00
Nikos Mavrogiannopoulos 18134a87d5 radius: advertise the correct NAS IP in accounting messages 2015-05-11 14:26:42 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos cc04bad753 set close-on-exec flag in sec-mod fds 2015-05-11 14:26:25 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos 45d380ccd9 corrected typos in IPV6 env variable 2015-05-11 14:26:10 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos 519ce111a5 increased MAX_MSG_SIZE 2015-05-11 14:26:05 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos e450b5a259 enforce more timeouts in sec-mod main communication 2015-05-11 14:25:58 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos d1d83d909c sec-mod: eliminated redundant parameters 2015-05-11 14:25:51 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos 10dcf1a82d added sanity checks in commands exchanged from main with sec-mod 2015-05-11 14:25:39 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos bbbf6e3467 radius: distinguish more disconnect codes 2015-05-11 14:25:31 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos 4c29de105a worker: introduce a minimum interval below which no stats will be sent 2015-05-11 14:25:25 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos ad9e3da777 radius: notify of disconnect timeout reason 2015-05-11 14:25:20 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos 5e6d15db45 oc_recvfrom_at: use correct packet type for IPv6 data 2015-05-11 14:25:13 +02:00
Nikos Mavrogiannopoulos da44c28a01 more files to ignore 2015-05-11 14:24:28 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos 020138d219 radius: use explicit sizes when setting NAS address 2015-05-11 14:20:15 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos 87a3fbf18e updated ipv6 MTU discovery 2015-05-11 14:20:08 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos f2e5e7e441 oc_recvfrom_at: fixed discovery of our IPv6 address 2015-05-11 14:20:00 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos a80a07fa53 added MTU discovery and adjustment in IPv6 2015-05-11 14:19:53 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos 0ca7389c5d radius: set our IP in the request explicitly 2015-05-11 14:19:47 +02:00
Nikos Mavrogiannopoulos ff36023277 doc update 2015-05-11 14:19:24 +02:00